General
- Target 2026-08-14_125b602543451fbbf9d85f70ddb9da34_coinminer_cryptolocker_elex
- Size 26KB
- Sample260814-tprbwsem5s
- SHA256 6a3e48b3ffce6556feef741b38d7ffd78829ea97df23753a947e22ccb64ef786
- MD5 125b602543451fbbf9d85f70ddb9da34
- SHA1 d1ffd8cbc37e0bf88f3401d0a19aacf0a8ec5455
- SHA512 0bde9e064b7fb176ed56b8b518ffdf9b37c96bf04499fb9f757f2920e5ba7284b6e4201af5f3c8f49d829d27b50b34fa289d511604816f83e5d38e348d682afd
- SSDEEP 192:gf85bTA1Wm4wtaTJlRGt+1sKYdK8LKUc+BxJ6wfHsoh5O9iuOjAwNpV4c4/m2fcP:gf85/A1U5rRGTxKaFfhU8J/zz47Fre
- TLSH T124C2E630BBF89D21E377853405F7F690647ABD513E0A961E669AF38C0933B50A9A0F1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_125b602543451fbbf9d85f70ddb9da34_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_125b602543451fbbf9d85f70ddb9da34_coinminer_cryptolocker_elex
- Size 26KB
- SHA256 6a3e48b3ffce6556feef741b38d7ffd78829ea97df23753a947e22ccb64ef786
- MD5 125b602543451fbbf9d85f70ddb9da34
- SHA1 d1ffd8cbc37e0bf88f3401d0a19aacf0a8ec5455
- SHA512 0bde9e064b7fb176ed56b8b518ffdf9b37c96bf04499fb9f757f2920e5ba7284b6e4201af5f3c8f49d829d27b50b34fa289d511604816f83e5d38e348d682afd
- SSDEEP 192:gf85bTA1Wm4wtaTJlRGt+1sKYdK8LKUc+BxJ6wfHsoh5O9iuOjAwNpV4c4/m2fcP:gf85/A1U5rRGTxKaFfhU8J/zz47Fre
- TLSH T124C2E630BBF89D21E377853405F7F690647ABD513E0A961E669AF38C0933B50A9A0F1D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE